#general
1 messages · Page 481 of 1
cool
You just need a lightweight, somewhat reasonably intelligent LLM such as llama-4b, and implement it.
I know its not super hard but i go into like full ADHD mode with my code and want to make it perfect and self learning so its not just copy paste answers and stuff lol
I need to shrink down my model and just see what happens
that's a little bit harder. What are you using? Torch or tensorflow?
I can probably help.
I've been working on new neurons, like a new activation function that uses quantum computing to use superposition as a way for the neurons to interact with eachother, simulating somewhat fluid neuron structure.
dude thats sick!
Ive been looking at some of the "consumer" grade quantum computers for my company lol
Honestly, you can just simulate the quantum computing part, but for me, I am trying to figure out a way to make the quantum computer NOT require -10000 F, so I am trying to figure out a way to make it work at room temps, I think it would be best to use a conductive molecule, but have nanotails that keep them from sticking together, making a 1 electron gap, which is required for quantum computing.
yes, I go ADHD mode as well.
glad i am not the only super nerd XD
2024-10-18 23:27:14 Note: --data-ciphers-fallback with cipher 'BF-CBC' disables data channel offload.
2024-10-18 23:27:14 OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
2024-10-18 23:27:14 library versions: OpenSSL 3.2.2-dev , LZO 2.10
2024-10-18 23:27:14 DCO version: N/A
2024-10-18 23:27:14 WARNING: INSECURE cipher (BF-CBC) with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). Support for these insecure ciphers will be removed in OpenVPN 2.7.
2024-10-18 23:27:14 TCP/UDP: Preserving recently used remote address: [AF_INET]63.35.110.70:1194
2024-10-18 23:27:14 Socket Buffers: R=[212992->212992] S=[212992->212992]
2024-10-18 23:27:14 UDPv4 link local: (not bound)
2024-10-18 23:27:14 UDPv4 link remote: [AF_INET]63.35.110.70:1194
I'm getting this error in Kali Linux when connecting to OpenVPN provided by Tryhackme I've been trying for a long time but I can't get it to work, can someone please help me?
I mean, I made a working model that is basically gpt-2 but for torch, adapted from tensorflow. I believe I can use my principles of "neuroplasticity" to make the model learn much more, because a single qubit can carry at most 10 states at the SAME time. Meanwhile, classical bits can only carry 2 states at DIFFERENT times.
uhhhhhhh try opening the .ovpn file in the text editor and look for the line that says cipher BF-CBC and change it to cipher AES-256-CBC
see if that works
ask in #site-support
also try just updating openvpn lol
The same thing happens when I change to CBC, I tried 3 encryptions
OK
thats still really dope
yeah, I've been working on a few projects on github.
although they are private.
a single electron wide gap is the thing needed for quantum computing. the structure needed to do this needs to be a molecule that can somehow latch together without having conductive connectors while being conductive themselves. Modern day quantum computers work on the foundation that they simply cool down the qubits, while positioning the molecules in a way that allows for quantum computing. These qubits will eventually go out of alignment and the chip will expire, just like food.
The chip becomes unreliable and inefficient, meanwhile in neurons (living ones,) the structure of the neuron allows for quantum computing at room temperatures. However, they do still expire, but not because of misalignment, instead they expire from lack of nutrients, and decomposition.
I have just woken up because of a toothache
Tooth 1 Stealth 0
My dentist had to refer me for this one because it’s sitting on a nerve 😭
Your tooth spotted you. (stealth reference)
Toothaches are the worse
I concur.
Can I temporarily ask for help on that channel?
uh, I don't know what channel you're talking about, this one?
yes
alright.
Sat Oct 19 11:51:24 2024 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
Sat Oct 19 11:51:24 2024 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
Sat Oct 19 11:51:24 2024 OpenVPN 2.6.12 [git:v2.6.12/038a94bae57a446c] Windows [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] [DCO] built on Jul 18 2024
Sat Oct 19 11:51:24 2024 Windows version 10.0 (Windows 10 or greater), amd64 executable
Gasp miss stealth is purple
Hang on, I'm processing the information given.
I have problems with AES-256-CBC when connecting,I have used --data-ciphers AES-256-GCM:AES-256-CBC and a separate CBC
I've tried looking on youtube, and what I've tried that they offer doesn't fix the problem.
It kind of looks like a problem originating from outdated binaries, but I am not yet sure.
Yes, pretty colour but I like the green
Is it because I'm in China that all the adjustments need to be made?
I like 0x1 color tbh
The latest version is 2.6.12, but yours is >= 2.5
I downloaded ovpn through tryhackme, and I can't solve the problem.
update the openvpn
OpenVPN 2.6.12 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] [DCO]
library versions: OpenSSL 3.2.2-dev , LZO 2.10
DCO version: N/A
Originally developed by James Yonan
Copyright (C) 2002-2024 OpenVPN Inc sales@openvpn.net
sudo apt upgrade openvpn
yesss
Perhaps you should try regenerating the ovpn file, and additionally make sure it is the server closest to your location?
What is that one 🤔
he did
oh he did?
so it said "AES-256-CBC is not supported by OVPN-DCO"
This is a little tricky.
DCO version N/A why?
I think this windows recall thing might be what makes me a full time Linux enjoyer
Sat Oct 19 12:00:07 2024 Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
Sat Oct 19 12:00:07 2024 Note: cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload.
Sat Oct 19 12:00:07 2024 OpenVPN 2.6.12 [git:v2.6.12/038a94bae57a446c] Windows [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] [DCO] built on Jul 18 2024
Sat Oct 19 12:00:07 2024 Windows version 10.0 (Windows 10 or greater), amd64 executable
yes
#site-support but I think openvpn is blocked in China so it likely won't work
but why is ovpn-dco version N/A?
I was wondering this too :/
Xiaolong do you live in China?
I'm going to check this. and yes Xiaolong lives in china
I was able to connect in September, but I haven't been able to connect since.
Thm's openVPN will not work in China because there's no obsufication
That's a shame, but if it is actually blocked then there isn't much we can do - I'd use the attackbox if I was you
It's very obviously a VPN so gets blocked
yeah, perhaps TryHackMe's VPN was added to the blacklisted ips.
attackbox sucks
VPNs that work in China have to take steps to not look like a VPN
It may not be as good as your own machine, but if its all you got then it is what it is I guess - nice that's its an option at least
Because it is inconvenient, when connecting to vpn at the same time, it will always be interrupted and reconnected, resulting in too much latency is not convenient to use.
yes the last option
obfuscation is hard when there is deep packet analysis happening on the scale of a literal country.
Fair enough
@languid locust I recommend you use attack box. It seems your PC is windows. Which you're not going to be able to use for THM anyway cause all the tools are Linux based. So you can connect to the Linux attack box through windows and use that. That does not require a VPN oddly enough. If you turn off all your VPNs you can connect to the attack box and the latency isn't that bad. But you'll lose access to discord at the same time.
What's funny is you can use the attack box browser to access sites not available in China 
well that is cool. They added internet access or was that always there?
I use VM virtualized Kali Linux using connection openvpn
Subscribers have internet access
ah.
I think it would be as easy as making a TCP openvpn. Hack the boxes TCP OpenVPN works in China. But not UDP.
why does only TCP work?
But other VPNs that can be accessed in China do use some pretty advanced obfuscation.
I don't know enough about the internet to comment. I dunno why, it just does. TCP works but UDP doesn't.
maybe the 3 way handshake confuses the firewall?
Like there's systems that go over to Amazon.com, take their certificate and then it just looks like your traffic is going to Amazon even if you deep packet inspect
that makes more sense.
I wonder if TOR works in china?
probably not to be honest.
It works, it's illegal to use
Just connecting to it is illegal
And they can obviously see who is using it very easy because all Tor nodes are pubic
Unless you use a bridge
that sucks...
It is illegal to set up a VPN in China, and you are not allowed to do so unless you are required to do so.
Even the good VPNs go down often though. But the VPNs spin up new instances. It's like cat and mouse
Depends how good your vpn service is
However, since everything in China is paid for, there may be certain things that exist on their own with Youtube, but when they arrive in China they will be programmed with paid content.
Common VPNs like Nord often don't work either
yes
The VPN service needs to specialize in China
Nord seems to be messing up a lot lately tbh usually used them cause I had a cheap deal ages ago but they seem a lot more inconsistent now
I think really the only way for people in China to use THM reliably is subscribe so you can deploy attack box as much as you like, and use it.
I wonder if any discord server started with only like 3 people and became a whole community? (THM should really make a /dev/null channel)
Every discord gotta start from 1 member
well yeah.
I meant as in like without any funding, without any recognition, without any website or anything to pretext the development of the server.
haha, my server doesn't even show up in the discover servers page (when explicitly searched).
Also an interesting thing, even if your connection is tunneled and all traffic goes via the tunnel in China and you open up the openvpn connection within the tunnel, it still won't connect. 🤔
huh. I wonder why?
Beats me, no one should be able to see what's in the tunnel
unless it's a form of deep-package-inspection.
I honestly don't know at this point.
If they could see an attempt at an openvpn connection, shouldn't they see you're visiting YouTube for example?
probably not. Though it does show high understanding of what a VPN looks like.
Perhaps in the future, if there's enough demand, THM can register to be approved in China. VPNs aren't blocked, unregistered ones are. Many Chinese companies use VPNs to connect to corporate networks or for marketing on YouTube
yeah. it would be helpful if THM did that.
Their base website isn't actually blocked, just the VPN aspect
I did gather that much.
Wat?
You know you can hack on Windows, right?
I know, that was my first platform.
This conversation...
Yeah but most of the stuff on thm is aimed at Linux users
no?
Do you use the browser this way? on the attackbox
I just moved to linux because of window's constant updates.
Well the sudo apt install commands it tells you to use ain't gonna work on windows
you need to download the tools on their actual website, or alternatively DSL.
Would it though?
Please allow the user to speak, don't do it for them.
Anyway, my question got ignored...
Scrubz it's almost 1 am my time (0100) dafuq? you get up at 5 (UK)
he's gotta wakeup early to workout
Gotta respect that.
Is there any mod with whom I can talk in private?
My cats decided to
A) check I was alive
B) tell me they hungry
About?
Yikes
bug
Face baps?
lmfao
More like sniffing, she's just a kitten
Ah, that's not so terrible.
What sort of bug?
Can I send you a message?
I have two GSD's they tend to just make me get up 😦
Mods aren't site staff, do it would be useless
So
all day every day just alt between upper and lower
do not skip leg day ever
eat 70 eggs
Let's be honest, 90% skip leg day.
40 lbs of shrimp
Have at it 🙂
yur
when I did xc I reinforced a really bad habit and became quad reliant for running/walking
I don't know if anyone has discovered the bug, but you save a lot of money with this
so now im working on returning it back to glute reliant for walking/running since that's how it's supposed to be
- it'll help me with potential back issues later in life
Just lift back 😛
my spine is essentially a solid mass 😛
Since you're not avoiding this question, I'm going to assume you are.
Using the THM machines for anything other than they're created for is against ToS.
This involves browsing with the attackbox, they are monitored.
I was waiting for this.
#site-bugs please.
If I leave it there, they will possibly take advantage of it
Why put browsing on them if you can't browse on them? They are useful for getting stuff off GitHub needed for doing rooms
that would be an intended purpose
That's a valid purpose.
So that's what I'm talking about
an non intended purpose would be using them for personal web browsing
it's a scope thing
kinda like when a school gives you a computer
That was not clear from the message and context 😉
Or getting on crackstation
that's actually a really good way to explain scope to someone now that I think about it
lol
Maybe not the best example for here
Fair
sorry.
I wasn't wrong though, I do understand that it was not appropriate for this server.
Uh ...
Yes it is?
well
if you had a net made up of your own computers it wouldnt really be illegal?
like if you're using it for shared computing
but for 95% of use cases it's illegal
As long as you legitimately own all of it, sure.
since yknow 99% of the time it involves fraudulent access
And then what legitimate use would you use your totally legit botnet for?
like I said
shared computing
or ethical research purposes
like attackign your own server etc
and then seeing what it looks like from a blue team perspective
as long as you own 100% of everything attacked and used though
I am back online.
Damn, I'm self deleting that...
what chaos happened while I was out? I'll just read.
oh, I see..that is kind of..oh. I got the question, ignored?
is he stealing the mona lisa?
Nickolas Cage is not involved
lol
Zumi I'm stealing that...
is it safe to post random memes here?
Within reason. It is a place of business for some, and an Educational Discord channel.
ah, I see.
General chat is a little more flexible, the channels are quite specific.
okay, hang on, let me get to a charger for my laptop.
Any content against the discord TOS, or that breaks the law is not permitted. #IAMNOTAMOD
Scrubz or the rest of the moderator team can expound more.
Yep. I would assume that.
Which countries laws though? 
probably ALL
lulz.
Then I can't say anything about Kim jong il 
anyways, I just like to see the rules before doing or saying anything, just to be safe.
don't want to be banned from another server.
especially one I actually fit in.
It's an interesting question, discord TOS says don't break the law on discord but who's laws?
Posting an LGBT flag would be illegal in Iran
I think it refers to general and local laws.
like common sense, and then specific laws you would probably have in your area/country as well.
I've read it.
I thought you were asking for the rules 😂
haha, no worries.
Does anyone here think it will be worth it to wait for the tryhackme black friday sale? Or would ot make sense just to sign up for the annual subscription now?
I never worry 😉 🙂
small question, I was at rank wizard (or so I think), but I was moved down a rank, does this happen due to inactivity or what happened?
These are better rules because they define UK and Californian laws as the ones not to break
that's reasonable.
I've never heard of wizard level
did I wake up in an alternate universe?!
those are this server discord
I very vividly remember I was at rank wizard, which comes before omni!
You have to figured that one out this always being my universe no alternative 😂
Yeah these are better than discord TOS. Because discord TOS just says "don't do illegal things" without defining that.
It could be possible. I would just have to travel faster than light somehow.
I could be wrong better check with mod or send an email to support@tryhackme.com
no, wizard does exist, but why is it after omni?
Don’t miss on Dragon Ball Daima 🐉 second episode is out 
His just repeating what I said almost straight after it lol, also hi 👋👋 how was your sleep
Got a science festival coming up soon, been asked to do a display table of something techie for the students. Wonder if I can figure out how to do a hacking table for primary school aged kids. 🤔
TryHackMe's explanation of encryption is so easy
like I finally fully understand how symetric algorithm wokrs
and for free is insane
Thank you so much TryHackMe team
My advice is to gamify it
Maybe try showing the log4j hack on a minecraft server?
Maybe I can just have a laptop running scratch they could try and play with
that would bring about some attention
Might be the way, otherwise could do something similar to how solo learn does their questions and have little game elements
Bit of a fine line to keep there interest tho
@neon merlin
Might be an easy way if you change it to multiple choice and just change variables so they can change small things on a game or something
Interesting but I don't think they'd know what they were looking at
Keeps it less tech but they still see something cool
makes sense
This might be fun https://www.create-learn.us/blog/how-to-make-a-mario-game-on-scratch/
In this tutorial, we're going to learn how to make a Mario game in Scratch. Super Mario Bros, released in 1985, is arguably one of the most popular video games of all time, and the poster child of not only the entire Mario franchise, but, to a degree, Nintendo as a whole.
Have the game running and they can also see the code
Maybe even show them how to change a simple variable like have a speed variable/size/etc kids can have a lot of fun with modifying small things like that
yep good idea
morning, beautiful people
as a kid myself i approve
I remember taking CS50 course at Harvard and looking at Scratch games.. some people made Minecraft/Terraria/3D games..
Oh damn thats cool
Never touched scratch myself I started with c++ then moved on to c# and unity probably took the hardest route possible lol
Ive only touched python n still learning it lmao
All progress is progress, and Python is usuable for most thing from beginner to expert
How old are they?
Yea im gonna try and learn c# next
I am awake again
If you can try to work out what your end job/goal is then get used to that stack otherwise might end up constantly jumping between different languages , it’s what I did you learn bits here and there but makes it a lot harder to stay good at the area without having to go back over things constantly
Yea im not really sure exactly what i wanna get into yet i just know some form of cyber security is something i wanan do
Not saying you have to but if that’s the case I’d stick out python for a little bit and look into different career targets till you workout an end goal , again only saying it because I jumped between different areas a lot and it ends up being a lot more work
Show them Linux Basics it’s fun and they will feel empowered with that knowing how the visual side is working in the backend.
They will have a lot of fun with that. They are very curious so even just changing directories and opening a file to see a password is fun AF 😂
They teach scratch at primary school level now. Lucky kids
I learned how to make ppts and .docs in IT class when I was at school
i kinda wanna get into reverse engeneering so might hosnestly try c++
Very lucky tbh, I started teaching myself originally wasn’t till like year 11,12 at school got to do a software class and they did Visual Basic but was a shit fight
I think you’ll find understanding asm,c++ and c is helpful but majority of RE will be tool based , some languages like c# will have better disassembly processes tho
For my end of year IT coursework we just had to make a microsoft access database. I made one for a prison.
Even then Python can still be helpful a lot of libraries there
It was kind of a shit project
Yea i mor elearned python because people said it wasa basic language to learn that can be used at an expert level and can be used in almsotr allw ays
I assume microsoft access isn't used anymore since I never hear about it
Yeah mine was a Visual Basic game back then but the teacher used to play guitar all lesson and didn’t really care about actually teaching he kept getting warned for people failing
But now I’ve done a bachelors degree and midway into my masters
Python is good for anything where runtime speed isn’t critical and you don’t need to compile like desktop apps, the amount of time you save in development tho is insane
I have a degree in film tech from a time when cameras took magnetic tape cassettes. 
So everything I learned is worthless
Oh rip
Woah
Ancient technology
That’s rough but would of atleast been interesting
If you wanted to ingest 5 hours worth of video footage it took 5 hours. Because you had to play it on a tape deck and, with that connected to the computer, hit record in the software
a painful time.
Still worth learning. You have higher education in something
Oh and we learned how to make 90s ass websites in notepad with raw html in high school
Another not very useful thing
Tbh i did a lot of development and it management work so originally wanted more verifiable sources for qualifications mostly for aiming for government sectors but my masters is still in progress and picking up a lot of good cyber stuff from that
I atleast got access to dreamweaver for those back then 😂😂
Puts it together terribly but it’s quick to make something look good
At least it's not WordPress premade sites
Wordpress is terrible, my old work paid for a site before I was doing their development stuff and there ideal of a site worth 10k was a half filled out work press template 🤦♂️
Let alone any functionality
I think I’m coming down with the sickness
I’m going to build a book nook for my book shelf
stalker
???
have u summoned me
Can anyone tell me why my openvpn or attack box not working.
Works for other ctf platforms but lately thm is kinda giving me hard time.
I want to Work as a SOC analyst but i also like coding alot preferably C++
i checked there dude
are you from china? since the users from china are having this problem
but attack box works
i am not in Asia
yeah it was working for me as well but not today
tried that even multiple vpn servers
..
can you send a screenshot
i tried but i think i am not allowed to send screenshots
copy the text
weird worked for another room 🤣
lol
What are you doing?
why? what happened?
what he did
something that is illegal, doesn't really matter
he shared a link
forget it, it's the weekend, what are you guys doing these days
On this day. solving the room mountaineer
legends say that if hiking is your hobby, you've got 10% higher chance of solving that room
really??
I totally didn't make that up just now
Last hope, jaxa
you got this, SAM, keep on working on the room
i am not really good at this but trying
that's how you learn usually the best, by trying
Hi guys where can I find beginner CTF in tryhackme?
Go to search section and filter easy and CTF's
Thank you bruh.
Gave +1 Rep to @remote swallow (current: #266 - 21)
How come I can't wget a file I'm serving up on my host? # wget 10.10.0.42 linpeas.sh
`--2024-10-19 09:36:34-- http://10.10.0.42/
Connecting to 10.10.0.42:80... connected.
HTTP request sent, awaiting response... 405 Method Not Allowed
2024-10-19 09:36:34 ERROR 405: Method Not Allowed.
--2024-10-19 09:36:34-- http://linpeas.sh/
Resolving linpeas.sh (linpeas.sh)... 104.21.89.223, 172.67.148.155, 2606:4700:3030::ac43:949b, ...
Connecting to linpeas.sh (linpeas.sh)|104.21.89.223|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://linpeas.sh/ [following]
--2024-10-19 09:36:35-- https://linpeas.sh/
Connecting to linpeas.sh (linpeas.sh)|104.21.89.223|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: \u2018index.html\u2019
index.html [ <=> ] 834.68K --.-KB/s in 0.009s
2024-10-19 09:36:35 (89.9 MB/s) - \u2018index.html\u2019 saved [854710]
FINISHED --2024-10-19 09:36:35--
Total wall clock time: 0.3s
Downloaded: 1 files, 835K in 0.009s (89.9 MB/s)`
It just keeps giving me index.html
I want linpeas.sh
Woow first time to see this 😮
also ensure that the server is serving the right dir
Use gobuster
if the file is in /desktop/example open the python server in desktop not in the example folder
This gives
--2024-10-19 04:43:56-- http://10.10.0.42/linpeas.sh
Connecting to 10.10.0.42:80... connected.
HTTP request sent, awaiting response... 405 Method Not Allowed
2024-10-19 04:43:56 ERROR 405: Method Not Allowed.```
vulnversity
I'm lookinf for SUIDs so one method is to run that linpeas.sh script
So I'm trying to get it onto the compromised server
wget isn't working I might just copy paste the whole thing into a new file
same
--2024-10-19 04:49:18-- http://10.10.0.42/linpeas.sh
Connecting to 10.10.0.42:80... connected.
HTTP request sent, awaiting response... 405 Method Not Allowed
2024-10-19 04:49:18 ERROR 405: Method Not Allowed.
he can search for suid's with this
I can't even create the script as a new file on the target 
touch: cannot touch 'linpeas.sh': Permission denied
this works but then the question just says "What stands out to you?"
nothing stands out to me
that linpeas.sh will tell you specifically what to look for
I know the answer is /bin/systemctl but it's useless to know the answer without knowing why
oh now i understand what is all this about
Or without knowing what I can do with this
does this stand out bcz it is part of systemd?
What an odd success message
and then the file is not there
I cd /tmp then wget
yeah
it works there
finally
and why this stands out bro?? have you figured it out?
I'm trying to search through the script output but I can't scroll up to the start
@cloud quiver @neon merlin Please use #room-help for help with rooms
I've had this issue before, i can't scroll up past a certain position
it seems to happen whenever there's super long outputs I can't scroll back to the start
Yep but please do so in the appropriate place
It kind of started a generic wget syntax question but alright
we can delete our own messages
(fails to occur in one minute)
nope working fine
dosent matter if you want to talk in arabi here they dont allow

Whenever I’m sick water tastes like it comes from holy lands
It’s so good
My head is dazed
happens with me too lol
Hey everyone here , I Want a guide from u all.
I have HP-Victus 15 ryzen 7 and RTX 3050 GPU .
I installed Kali Linux on it 2 months ago I worked a little fine but there were many issues I had , my fan was not working , brightness bar not working , nvidia not supported, no GPU performance , and many more ...
But from last 15 days it started crashing too ,
Whenever I lot down my laptop screen and open after some time it shows a black screen and do not open , so I have to do force shutdown ..
But yesterday it even don't open with a force shutdown ...
It was crashed , so I installed windows again ,
But I don't want windows so I searched more and got to know about Garuda Linux which is for gaming so anyone please suggest can I use it like as in kali ,
And also suggest do it support nvidia drivers....
Please 🥺
I had similar issues with Kali installed as the base os on a laptop before learning this really isn't what it's for. It's for running in a VM on a more stable distro like Mint or Ubuntu. Kali is not supposed to be daily driven. Mint is really good for making that first step from windows to Linux.
congratulations, I'm also on the way to 100 rooms, keep it up!
Everything on my laptop just worked with Mint. All the specific laptop things like suspending when closing the lid etc all just worked
Hey, is anyone currently a part of any project in cybersecurity? Kindly respond. I would like to talk with you. Thanks 😊!!
Tap ?
Thanks, sure will. Good luck to you too!
Gave +1 Rep to @arctic cradle (current: #689 - 6)
Why not
Hello everyone, I might need help with my sources.list file.
Everytime I try the command sudo apt-get update, I have an error message that say : Err :2 http://ftp.debian.org/debian stretch-backports Release
404 Not Found [IP : 199.232.170.132 80]
I'm quite confused with that issue
Water is water
Oh forgot to say that my OS is Kali Linux
hey
See https://www.kali.org/docs/general-use/kali-linux-sources-list-repositories/
deb http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware
deb http://security.debian.org/debian-security stretch/updates main
Additional line for source packages
deb-src http://http.kali.org/kali kali-rolling main contrib non-free non-free-firmware
witch is better c++ or phyton
replace your file with this
c++ is better python is easy
Guys im working with metasploitable 2 and i want to install an IDS and configure some firewalls so if i attack it there would be an realistic operation going on, i tried installing snort im getting lots of errors especially when i upgrade it, im guessing we cant download anything from the machine
?
whats your os
did you try installing it manually
Snort isn't really designed to be installed on the machine you're attacking
It's designed to be on a seperate machine, able to see all the traffic
I'd recommend creating a new VM and enabling promiscious mode on it to allow Snort to capture all the traffic
I know but i wanted to do it just so i can see whats happening on the other side as well, more on a realistic level.
Yes, but the way to do that is by creating another VM
Thanks your for the help. However, it didnt worked. I dont know whats wrong
Hello everyone, do vouchers still work?
Yes?
I'm planning to try buying a voucher instead
i will try that
If you're less interested in the steup and more interested in the results, https://www.stamus-networks.com/selks this might be useful
SELKS by Stamus Networks is a free, open-source, and turn-key Suricata network intrusion detection/protection system (IDS/IPS), network security monitoring (NSM) and threat hunting implementation created and maintained by Stamus Networks. Released under GPLv3 license, the live distribution is available as either a live and installable Debian-bas...
Yeah I had an issue with the monthly payment (the mismatch error) ever since the subscription was denominated in dollars. Now, I thought why not buy a voucher, it is still denominated in quids, and it might go through.
Are there challenge rooms on the Reverse Engineer topic?
Yes
I just wanna give it a more realistic feel to it, inreality a machine isnt 100% vulnerable
If your account region is UK, you are billed in GBP otherwise dollars
Not sure if vouchers are different, they may be
What do you suggest? I have a ticket already open though, but will be probably be dealt with next week. No harm in buying a voucher instead right?
Worst is it'll get rejected
Deploying snort or suricata won't reallllllllly do that, unless you deploy it as an IPS
If there is, please suggest room names.
Yeah might be worth a try, assuming there's no student discounts etc that make a regular sub cheaper
i guess ill just attack it first then think about a solution to this later
hi
anyone who hates tmux?
im new here
welcome
I like it tbh
does the voucher go to your email?
Nobody hates tmux...
anyone with kali linux i'm struggling with a thing
for an hour now
thought to join an disc server and ask abt it
There is a kali specific server for that
..What's wrong with this one?
What's up?
i dont see none
Yes.
You should also get a dashboard if you purchased it.
a little bit osint ¯_(ツ)_/¯
WHYYY?
It's super cool
i hate it
¯_(ツ)_/¯
no luck money just gets refunded. Guess I'll have to wait till monday.
babababaababa i agree
Hay.
taste?
Noooo.
Water is different from sources.
Scotland has the best water.
English tap water is too soft.
Water tastes like nothing
I’ll drink out of a garden hose
Do people think I’m posh or something
I am literally the girl who walks in the mud bare foot??
I’m not going to deny that, find it a compliment actually 😌
you like adventures
I know that feeling, I used to lose shoes in fields when I do OCR.
Yo
The only time I like going out out is to find fossils, shells or plants
then u r an explorer
or just weird
why
Nothing wrong with fossil hunting.
I’m googling ocr and got optical character recognition 😅
me too lol
"Obstacle Course Racing"
ohhh
Ohhh okay
Not that one either bleh
Dude, everyone does.
Let it be so. 
Relive the MacTuff Scotland January event from 2022.
MacTuff is now in Scotland and England. To get details of our current event dates and to register for any of our events, please go to www.mactuffocr.com
Many thanks for Heavens Above for the video content and production.
That one.
Only because I appear in the video a few times >.>
Looks like fun tbh but I wouldn’t make it 😂
how to recognize you
Uh...
I'm a guy, that's all the help you get.
a scrnshot i really wanna see you lol
Nope. 😄
OK
I don't even have anyone from LinkedIn in here or anything.
You got a beard
i use linkedin
I hope so, it's great for networking.
Nobody has seen me in here, and I intend to keep that way for as long as I can.
That’s fair enough
ok MR anonymous
It's not being anonymous, or I'd not have my face on LinkedIn, lol
what's wrong with that
nothing
what's with the new THM update
Wdym?
they posted on instagram that something big is coming
Oh I wonder 🤐
what you think it is
dark theme
That's December.
i was gonna say the same
Christmas present
I have a rough idea what it is, and I can't say.
could be some big event
Could be an announcement 😄
of what?

I'd rather not have the THM annoyed at me, I've annoyed them before in the past. 
past. how?
dont say that u cant tell
I joined a bunch of private rooms that were being worked on and solved them as the creators were making them.
And other rooms members were/are not supposed to have access to them.
lol...you are crazy
how did you join private rooms
I can't tell you that.
Although, who's excited for Advent of Cyber 2024?
i haven't finished 2023 yet
That's ok, you can do them anytime 😄
this is your rough idea?
i'll finish it before the 2024 one come out
Oh no, that's already announced.
Just not in here for some reason...
i heared it.... now from you
what's yall stats on THM
??
damn
I miss when postman and insomnia weren't login walled
Burner accounts? or not really worth it now?
I just use old insomnia really
go touch some grass or sum
Wat?
Cloud connection too for Postman, it's pants
Oh wow... Avoid like the plague then.
Tap water in UK does not taste like nothing
Try water from a well in some parts of Europe
Good Luck
Thanks
You got this

I have a question can I use THM's OWASP-2021 vm to demonstrate the vulnerabilities in my video? @devout palm
please let me know
@devout palm did you ask her? 😉
Hey, I just got my eJPT certification, and I want resources in THM to help me prepare well for the eCPPT 2024 <:
whats the cert about, mostly
ecppt ?
Hmmm, check out the red teaming and offensive security path
This learning path will teach you how to execute adversary attack emulations as a Red Team Operator.
Acquire the skills needed to go and get certified by well known certifiers in the security industry. Learn about industry-used penetration testing tools and attain techniques to become a successful penetration tester.
Web Application Penetration Testing
if you haven't done those already of course 
No problem!
shadow likes @sick lance stance of not showing their face on here
can some explain how points work in thm
like where do you get the most points
on challenges?
for simple answers you are rewarded 8 points
are u looking for rooms to increase your rank?
yes
I fear you will copy paste the answers
Wait until you see you can add friends
bruh do you see my rank
what would I get
out of lying
i am a OMN1 too
what is ur user name
the same
i just want to see if u have completed the rooms i am going to tell
I sent you the username
ok found you
What is the password for root on the AttackBox?
it would usually say it in the notes
@rapid merlin ICE room
Oh, ok so there isn't a common password for root
as per what I remember no
but I might be wrong
@rapid merlin REmux The Tmux room
they have a hell lot of points
okay thank you
there are more
I am not from Turkey but I live in Turkey at the moment
well there are many more rooms like this out there but i cant search for them right now
where are you from
it is all good thank you for the ones you gave me
I am from pakistan and 16yo... is this enough
Nice to meet you bro
are you employed
yes
keep it up
how old are you
24
ok
yeee
Iran's nuclear facility in Natanz
send to me error
if it's part of a room then the answer is in the literature
I searched a lot, but I don't know how to get an answer
Case Study: Stuxnet (Click to Read)
Stuxnet was the name given to a particularly nasty computer virus (allegedly developed by the governments of the United States and Israel) that was originally used to target the Iran nuclear programme in 2009. Due to its ability as a "worm" to self-replicate (i.e. clone itself across networks — including the internet), the virus escaped and became much more widespread than was intended. Multiple variants now also exist, making Stuxnet a particularly hard-hitting and notorious weapon. You can read more about the background of Stuxnet here.
What makes Stuxnet particularly interesting for this section is the original method of infection. The virus can clone itself across networks, but that doesn't help much when the target network is a nuclear weapons development facility with no access to the wider internet. The question became: how can you get a virus into a network that doesn't let anything in or out? The answer was simple: drop malicious USB devices in places where workers at companies that dealt with the facility would find them and hope that one of them plugged the device into a work computer. In this case, the gamble worked, with Stuxnet causing severe damage to the Iran nuclear programme and effectively destroying many of the nuclear centrifuges.
He tells me to study this case and I tried the answers in it and I got an error
The answer is literally there I can see it
thanks pro
an
Gave +1 Rep to @jolly forge (current: #1132 - 3)
answer is The Iran nuclear program.
NoHints12345

time for the next advent of cyber xD
Can't wait
I love drinking some hot chocolate while doing the new rooms, with some christmas jazz in the background
I’m sipping on lemsip
I hope im not sick in december
I’m well ill
more lemsip 
Everytime I get sick I made this other drink
Golden milk
Sickness hits me hard, if im injured or something its fine i go to school whatever, but if i get a cold im bed ridden for days haha
wtf is dat
It’s a milky tumeric drink with a kick
It’s good for colds and flu because tumeric has anti inflammatory properties
I like the taste
idk man u do u
But I only have it when I’m sick
of corse :D
But it’s very good for you, it’s a drink that originated from India
I can’t really describe the flavour though
what are you learning
random stuff
like ?
like currently Tmux
just having fun with it
i dont really know why i just like it
yesterday is my 3rd holiday
there was some government shit on friday and today i just didnt go
Gave +1 Rep to @sudden pond (current: #2275 - 1)
Gave +1 Rep to @plain grotto (current: #1503 - 2)
haha it worked
the robocop is a fool
0x9 OMNI
dont have the money
i cant save money
it's not worth it
why
nah, i know someone who have it
not that many features
it is cheap tho
Yeah, and some networks
why do u even need more room time
never had that problem
It's.. a bot?
just kidding
It's a basic script that checks whether someone says a keyword and awards a reputation point 😄
5 min cool down period too.
what if someone misuses it
thank you, Mulder
Gave +1 Rep to @sudden pond (current: #1503 - 2)
:c
Can't tag yourself, only one person is tagged
We can detect it and we add you to an exclude list on the bot
how do you even get the points ?
It was a role awarded to all users who successfully completed our Throwback network before it was removed:)
thanks @rapid merlin
Gave +1 Rep to @plain grotto (current: #1132 - 3)
Throwback was the first network room released on TryHackMe 
hmm
just trying it
It was both a guided walkthrough and a blackbox style challenge for those who wanted to root the network.
https://www.youtube.com/watch?app=desktop&v=mQT38VR4boQ&t=3h20m15s
More on Twitch soon! https://twitch.tv/johnhammond010
Hang with our community on Discord! https://johnhammond.org/discord
If you would like to support me, please like, comment & subscribe, and check me out on Patreon: https://patreon.com/johnhammond010
E-mail: johnhammond010@gmail.com
PayPal: http://paypal.me/johnhammond010
GitHub: https://githu...
what is the benefit of that rep
It was intended to be used to highlight helpful community members who would receive rewards on a monthly basis for being the top of the leaderboard but the idea was paused:)
so its useless ?
I want a cute little robot to keep on my desk
it gives you a few virtual inches 😉
It still helps moderators see who is being awesome in the community, but yes 😄
One message removed from a suspended account.
u are really strange
i want another dog
and i want a billion dollar
i already have 2 dogs but i want another
It would have been a range of different rewards from Amazon vouchers to TryHackMe subscriptions to swag!
I don't understand the question
Why do you guys remove rooms. Is the information outdated?
Is there a specific room you have in mind?
Or just Throwback
No just in general
I work for TryHackMe 😅
what do you do ?
? This is general chat
I’m allowed to speak.
It depends.
We rarely remove rooms. For example with Throwback, we replaced it with a range of better content that was more up-to-date.
This is the same as the old nmap rooms or linux fundamentals rooms which were replaced with newer content:)
One message removed from a suspended account.
I am the community manager
Thanks
Gave +1 Rep to @plain grotto (current: #922 - 4)
The topic was on robots, it doesn’t have to be a question
I was making a statement
One message removed from a suspended account.
It is given to those who use the Discord server and need special permissions :)
Anyone with the "THM Staff" role is an employee.
and he was asking a question
BYE!!
And I replied
Ah I see
I'm new here. I don't know how to start. I hope everyone's help. To complete my ethical hacking journey.
Have you signed up to https://tryhakcme.com/ ? :)
I think I'm the only one who's totally blank here.
What do you mean by totally blank?
knowledge Bro
I have already registered.
Well you're in luck, TryHackMe requires no fundamental knowledge of cyber security:)
🥰
i don't think he knows anything
I started with zero knowledge and here I am a year later
Still nothing
😂
same
No
I have only completed the basics of Python language. Moreover, I have no knowledge about cyber security. But I believe I can, if everyone helps me.
Cringe? 🤣
🤷♀️
How doesn't it? Ethics and morals are a big part of cyber security and it's surrounding choices.
actually that's why they made two teams
It’s apparently so cringe to be a good person now days
I got such a bad habit of instead of saving videos to Watch Later list or saving links to browser, I just duplicate the tab and have a lot of tabs open "for later". Every day when I open my browsers (I do this on multiple browsers with multiple websites) I just have around 20-30 tabs in the background lol
blue team dosen't mean good person
I chose blue team because I wanted “Defend” people who needed it
the bad people tend to be the loudest on the internet
They are fr
i'll have to agree with him, that's actually cringe
How? 🤔
Thank you so much
Gave +1 Rep to @plain grotto (current: #786 - 5)
"defend people who need it"
Yes, that is pretty much blue team.
For example, SOC:
https://www.opentext.com/what-is/security-operations-center#:~:text=A security operations center%2C or,analyzing%2C and investigating cyber threats.
i know what it means
Well I think our humour might be a little bit different because you lot are obviously a lot younger than I am
Don't mind friends, what is the blue team
Maybe they meant that people aren't organisations or entities
You can learn all about it here -> https://tryhackme.com/r/room/defensivesecurityintro
You would prolly leave this server if you saw how much of that was in here at some point 💀 💀 🙏 😭 💯 💯 (forgot the emojis)
Thanks 😊
A hero has appeared
What in the AI
Gave +1 Rep to @wooden totem (current: #275 - 20)
yumi can testify
👋
Thanks for details
Gave +1 Rep to @plain grotto (current: #689 - 6)
excuse me sir, its actually betta, like with double T, like you know the betta the betta the fish the betta fish you know the fish its named betta fish or something idk i think its officially more of a nickname but still is very recognizable as a fish name like betta you know. If you forgot, it's B - E - T - T - A, its with double Ts because with single T its not a fish its like a term for early access idk actually I gotta google that I forgot the defeinition I just know its like a state but its not a fish its just a single t thats different, double T for fish man
Gave +1 Rep to @wooden totem (current: #266 - 21)
Betta fish are pretty
so all red teamers are bad people?
That’s not what I meant
Red teamers are people that simulate intrusions on an organization. They usually have permission to do this
Show me proof.
Yes we are
Members only get banned for unsolicited DM's if they're scams.
No?
I ask because I don't understand the logic of "I join the blue team because I am a good person who want to help people". Thats atleast what I got out of your comments.
i will
I clearly explained what I meant when I explained why I joined blue team
You said it alligns with your morals, correct?
Well you joined because you like blue team stuff
Yes because of “defence”
Doesn’t make sense
Which is the whole logic behind being a blue teamer
Pentesters test stuff so a bad guy can’t do it before it’s patched
Usually pentesters etc work hand to hand with defense
I am just going to drop this convo. I am just trying to show the flaw in her argument. Nothing personal.
Feels personal since every single
Person has been on my case today
Especially if they don't align with yours.
Generally, security work makes the world a better place. Some exceptions. Not many.
Ig it’s too hard to understand
jeeez relax
Anyways
Yall ever wonder
I mean
It’s not your fault people took it differently
It’s best to respect others opinions
blocking someone is an option for a reason
I have blocked them all
if u dont wanna interact with them then that is often the best solution
Very true
Thing is discord has to show the messages that are blocked
Which is stupid
i thought it didnt show the message and only like "1 blocked message"
That’s what I ment
It’s tempting
You can click to reveal the message
You'll still see they're there when someone is in chat having a conversation with 'themself'.
Lol
Respecting everyone's right to express opinions is different from respecting everyone opinions. I disagree with the latter. People's opinions can be wrong.
An opinion can't be wrong, it's an opinion
Would love to have this as a sticker!
Different opinions to you != Wrong
This
so what they are not allowed to be scrutinized?
They can say the same about you then
yes they can
You can be scrutinized too
thats the point
In an appropriate time and place yes, but you can't tell me that lettuce sucks if I love lettuce.
So what’s the point?
It is against the server rules
Please keep all communication in English. This also means no encrypted posting.
If I say I don’t like broccoli scrutinizing won’t make me like broccoli again
(I like broccoli)
Raw broccoli on the other hand eh the hard little ball things on that stalk of it gets annoying
The thing is that’s not even what I meant
The same can be said of those who red team
Responsibly at least
I’m not sure if morality plays a portion of which hat you put on.
Hola

